CVE-2026-72898

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

September 6, 2026

Last Seen

September 9, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Trezor Data Breach Exposes 80,689 Customers to Phishing Risks69.8

A significant data breach at Trezor's logistics partner, ShipMonk, has exposed personal information of approximately 80,689 customers, including names, email addresses, phone numbers, and shipping addresses. The breach was enabled by a critical SQL injection vulnerability (CVE-2026-72898) in the Met...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Trezor Data Breach Exposes 80,689 Customers to Phishing Risks

Sep 9·43 sources

Related Articles (4)

Trezor Breach Tops 80K as Phishing Calls Hit Buyers [2026]

Shattered·Sep 9

Trezor's Supply Chain Cracked Through ShipMonk's Unpatched Metabase

Cryptorank·Sep 7

Trezor’s Supply Chain Cracked Through ShipMonk’s Unpatched Metabase: 67,000 Crypto Customers Exposed

Forkast.News·Sep 7

Trezor ShipMonk Breach Exposes 67,000 U.S. Customer Records via Metabase Zero

Related Entities

ShinyHunters Sql Injection Supply Chain Attack Data Breach Phishing Ransomware Zero-day Exploit Metabase ShipMonk Trezor Framework Cisco